Is CVE-2026-82223 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-82223 being exploited in the wild.

How severe is CVE-2026-82223?

Medium severity, with a CVSS score of 6.5, published 2 September 2026.

Which products and versions are affected?

Arraytics WP Event Solution <=4.1.22.

Is there a fix for CVE-2026-82223?

A patch was published on 2026-09-01: version 4.1.23 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-82223 attacked?

It is attacked over the network.

Am I affected by CVE-2026-82223?

Check whether you run Arraytics WP Event Solution at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-82223: WP Event Solution broken access control

Q: Is there a fix for CVE-2026-82223?

A patch was published on 2026-09-01: version 4.1.23 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-82223 attacked?

It is attacked over the network.

Q: Am I affected by CVE-2026-82223?

Check whether you run Arraytics WP Event Solution at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-82223 · Severity: medium · CVSS 6.5 · Published 2026-09-02

WP Event Solution is a WordPress plugin for managing event bookings and ticketing on websites. This vulnerability allows unauthenticated attackers to access pages and perform actions they should not be permitted to do, such as viewing other users' event data or modifying event information without proper authorization.

Technologies: Arraytics WP Event Solution. Vendors: Arraytics.

Quick answers

Is CVE-2026-82223 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-82223 being exploited in the wild.
How severe is CVE-2026-82223?: Medium severity, with a CVSS score of 6.5, published 2 September 2026.
Which products and versions are affected?: Arraytics WP Event Solution <=4.1.22.
Is there a fix for CVE-2026-82223?: A patch was published on 2026-09-01: version 4.1.23 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-82223 attacked?: It is attacked over the network.
Am I affected by CVE-2026-82223?: Check whether you run Arraytics WP Event Solution at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a broken access control issue in WP Event Solution plugin versions up to and including 4.1.22, allowing unauthenticated attackers to bypass authorization checks. The plugin fails to properly validate user permissions before allowing access to sensitive functionality or data. Attackers do not need to authenticate and can access restricted content or actions over the network. The vulnerability affects unauthorized data access and potential modification of event records. A patch is available in version 4.1.23 and later.

Affected products

Arraytics WP Event Solution <=4.1.22

Timeline

2026-09-02: disclosed
2026-09-01: patched: version 4.1.23 released

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.